Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: mmekHrmCyUhlXoOKFNxBV3yhofwnP8w66I59sxVVac8=
Subject key identifier: 21:DB:5D:FA:94:91:DB:E0:2F:76:0D:C7:A6:D5:E8:2E:B7:D6:3C:5C
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 01976D3D9948FAA975CEA35C9E07F36F303F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 1520
Signing time: Sat 14 Jun 2025 07:00:42 +0000
Manifest this update: Sat 14 Jun 2025 07:00:42 +0000
Manifest next update: Sun 15 Jun 2025 07:00:42 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: pCA54/kLdfRgqkGqA0IKoiT29k6f7Br2twVB+mNpS9M=)
2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:99:48:fa:a9:75:ce:a3:5c:9e:07:f3:6f:30:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Jun 14 07:00:42 2025 GMT
Not After : Jun 15 07:00:42 2025 GMT
Subject: CN=21db5dfa9491dbe02f760dc7a6d5e82eb7d63c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:6e:2c:90:e9:da:e3:3b:c3:9c:17:d7:ef:
5a:66:5f:bf:79:fb:01:6c:7f:94:f3:95:e7:72:d4:
91:b9:6e:42:e2:42:9c:dd:05:dc:25:2b:72:02:c6:
b8:ca:38:b4:ee:ef:51:f3:19:29:77:1a:da:f8:8e:
f3:be:52:47:6f:19:16:68:44:90:a0:eb:0e:b6:cd:
09:08:b1:1f:2b:36:df:c4:a5:4a:58:e5:4a:a0:a4:
0c:df:2a:b7:c7:fd:7f:38:f4:2a:a4:d6:eb:ea:c6:
47:77:7f:af:26:50:1a:c2:8a:17:a9:2c:8d:e2:fb:
8a:25:2a:b8:fe:45:eb:ac:74:b1:03:eb:2e:5f:9e:
35:da:55:1b:cb:ab:e8:bd:b0:91:b6:38:cd:e5:0d:
eb:9e:45:34:ba:c1:73:ac:8c:41:c2:70:72:9c:c5:
cf:16:2b:a8:9c:f4:d2:39:39:fb:6e:3f:4a:6a:5c:
ac:b1:b2:28:85:54:7d:84:d0:72:c9:1b:db:5c:0f:
b6:8a:19:b3:b2:25:21:31:db:d2:b0:8e:1c:bc:d0:
60:25:c4:70:e6:04:47:0d:cf:52:96:5e:5b:b6:0e:
82:eb:80:3b:28:96:4b:be:32:ec:61:fc:03:4a:9a:
4b:cd:3e:b3:c7:e4:7a:57:b1:aa:8f:a0:b9:0e:dd:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DB:5D:FA:94:91:DB:E0:2F:76:0D:C7:A6:D5:E8:2E:B7:D6:3C:5C
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:61:b6:61:7e:7c:a9:0a:45:be:02:de:9b:f8:94:d3:77:eb:
ff:19:8a:32:8a:29:f4:81:4d:0d:8f:75:1b:fb:01:01:d3:d4:
e4:87:f4:52:e4:67:9f:b4:c0:15:bc:ac:fc:21:24:80:f8:db:
ef:c5:06:89:40:12:68:4f:3c:cb:04:11:69:96:9e:65:61:91:
53:5f:58:2e:b8:9a:6c:dd:3d:e8:9e:fb:8f:58:c1:b0:43:f7:
5d:a8:aa:a4:a1:b8:49:0d:7e:f4:44:aa:b6:c9:16:90:d1:8a:
66:e0:8a:ab:2c:49:66:6f:94:ef:ae:99:db:5a:c5:48:44:bd:
e0:f8:9a:55:01:99:2b:ec:99:13:ed:b2:4f:8e:41:58:1d:bc:
f1:fa:93:6d:ac:9c:67:b8:75:82:56:6d:cf:39:4d:91:9d:6d:
0a:60:2b:f8:1a:8b:e3:9c:30:d9:f7:ef:31:6f:1b:3e:fc:92:
54:2d:64:07:bc:db:6d:cf:33:90:23:58:0a:1f:16:91:56:e3:
ad:87:21:48:4b:de:ba:ab:e6:8d:a4:56:e7:65:a5:f2:60:e8:
89:0b:48:d2:12:1b:7b:c8:bb:10:e6:30:36:b6:30:fe:ad:6b:
92:53:5b:99:18:02:1c:6c:57:05:24:01:1a:c0:9c:c0:c3:2b:
78:83:29:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPZlI+ql1zqNcngfzbzA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWE4ZDkxZmU0NGYxYTk2MzlhZWQ1NjFjMWJjYWZjYmYx
MGIyNWQwHhcNMjUwNjE0MDcwMDQyWhcNMjUwNjE1MDcwMDQyWjAzMTEwLwYDVQQD
EygyMWRiNWRmYTk0OTFkYmUwMmY3NjBkYzdhNmQ1ZTgyZWI3ZDYzYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPxuLJDp2uM7w5wX1+9aZl+/efsB
bH+U85XnctSRuW5C4kKc3QXcJStyAsa4yji07u9R8xkpdxra+I7zvlJHbxkWaESQ
oOsOts0JCLEfKzbfxKVKWOVKoKQM3yq3x/1/OPQqpNbr6sZHd3+vJlAawooXqSyN
4vuKJSq4/kXrrHSxA+suX5412lUby6vovbCRtjjN5Q3rnkU0usFzrIxBwnBynMXP
FiuonPTSOTn7bj9KalyssbIohVR9hNByyRvbXA+2ihmzsiUhMdvSsI4cvNBgJcRw
5gRHDc9Sll5btg6C64A7KJZLvjLsYfwDSppLzT6zx+R6V7Gqj6C5Dt2E2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHbXfqUkdvgL3YNx6bV6C631jxcMB8GA1UdIwQY
MBaAFNRajZH+RPGpY5rtVhwbyvy/ELJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWIt
NTg4NjVkMWUxNGUwLzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYWM0MDYtMWQ5Yi00NjFkLTg1NWItNTg4NjVkMWUxNGUw
LzEvMUZxTmtmNUU4YWxqbXUxV0hCdktfTDhRc2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmG2YX58
qQpFvgLem/iU03fr/xmKMoop9IFNDY91G/sBAdPU5If0UuRnn7TAFbys/CEkgPjb
78UGiUASaE88ywQRaZaeZWGRU19YLriabN096J77j1jBsEP3XaiqpKG4SQ1+9ESq
tskWkNGKZuCKqyxJZm+U766Z21rFSES94PiaVQGZK+yZE+2yT45BWB288fqTbayc
Z7h1glZtzzlNkZ1tCmAr+BqL45ww2ffvMW8bPvySVC1kB7zbbc8zkCNYCh8WkVbj
rYchSEveuqvmjaRW52Wl8mDoiQtI0hIbe8i7EOYwNrYw/q1rklNbmRgCHGxXBSQB
GsCcwMMreIMp0w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:47:33 2025 by rpki-client